Enabling IPv6 ACL rules for sFlow monitoring

sFlow is a sampling technology for monitoring networks. You can monitor specified incoming data flows by including the copy-sflow keyword in rules within an ACL applied to a device.

In order for sFlow to function, the sFlow collector must be globally configured. For details, refer to the Extreme SLX-OS Monitoring Configuration Guide.

  1. Enter configure terminal to access global configuration mode.
    device# configure terminal
    
  2. Enter the ipv6 access-list standard/extended command to create or access the ACL.
    device(config)# ipv6 access-list extended ipv6_ac1_1
    
  3. In each rule for which you need to enable sFlow, include the copy-sflow keyword.
    device(conf-ip6acl-ext)# seq 20 deny ipv6 2002:2003:1234:1::/64 2001:3001:1234:1::/64 copy-sflow
    device(conf-ip6acl-ext)# seq 30 permit ipv6 2002:2004:1234:1::/64 2001:3002:1234:1::/64 copy-sflow
    
  4. Apply the ACL that you created to the appropriate physical interface, specifying the in keyword.
    device(config)# interface ethernet 0/1
    device(conf-if-eth-0/1)# ipv6 access-group ipv6_ac1_1 in